Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/854ra-UGzdN0kA3OZZZ20r2tfIM.roa
File: 854ra-UGzdN0kA3OZZZ20r2tfIM.roa (raw, json)
Hash identifier: e/UbLeq1+GJu4OQRTZpw2z+fl34jma/UYjl/PXVoNd8=
Subject key identifier: F3:9E:2B:6B:E5:06:CD:D3:74:90:0D:CE:65:96:76:D2:BD:AD:7C:83
Certificate issuer: /CN=ad0b79e4b59c5fcda493a20ad18e9455859d031b
Certificate serial: 018EAD7510A28B9F65ECA6DB0EDB80AC3C49
Authority key identifier: AD:0B:79:E4:B5:9C:5F:CD:A4:93:A2:0A:D1:8E:94:55:85:9D:03:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQt55LWcX82kk6IK0Y6UVYWdAxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/854ra-UGzdN0kA3OZZZ20r2tfIM.roa
Signing time: Fri 05 Apr 2024 08:51:54 +0000
ROA not before: Fri 05 Apr 2024 08:51:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21119
IP address blocks: 5.226.160.0/21 maxlen: 24
46.16.48.0/21 maxlen: 24
80.86.128.0/20 maxlen: 24
82.117.32.0/19 maxlen: 24
82.117.32.0/20 maxlen: 24
89.105.32.0/20 maxlen: 24
89.233.96.0/21 maxlen: 24
93.187.80.0/21 maxlen: 24
185.36.28.0/22 maxlen: 24
193.169.42.0/23 maxlen: 24
193.201.74.0/23 maxlen: 24
213.179.48.0/20 maxlen: 24
217.65.224.0/20 maxlen: 24
2001:a90::/32 maxlen: 64
2a01:b8c0::/32 maxlen: 64
2a03:6240::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQt55LWcX82kk6IK0Y6UVYWdAxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ad:75:10:a2:8b:9f:65:ec:a6:db:0e:db:80:ac:3c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0b79e4b59c5fcda493a20ad18e9455859d031b
Validity
Not Before: Apr 5 08:51:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f39e2b6be506cdd374900dce659676d2bdad7c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ce:2b:8d:94:46:0d:e8:00:2c:5c:8f:f0:1c:
10:9f:00:f3:5b:77:5b:52:5f:13:23:c7:0d:2f:5b:
03:7f:81:cd:26:bf:67:0b:8c:33:05:13:31:43:3f:
22:ad:f2:0a:41:8e:a0:70:2b:a6:23:5d:cc:a9:b4:
b9:8d:bc:df:ab:ae:98:a9:a6:a7:6b:82:2d:e8:b9:
95:67:49:b6:67:5b:c3:4d:24:c0:52:b8:6c:cd:01:
b5:c9:89:45:44:ce:2c:f0:27:98:58:8f:cc:39:c3:
82:c3:13:cf:99:65:b3:2e:21:d0:7a:09:fc:4c:da:
7b:9a:8b:ae:82:fc:62:36:dc:fd:63:0a:2b:c4:d9:
47:24:d0:2f:a1:94:14:c1:0b:9e:52:ae:5b:01:32:
68:40:b1:73:ca:f9:6d:83:ab:12:66:1e:4b:12:ea:
96:f4:ee:91:93:77:51:3f:9b:3c:e3:ac:29:5e:38:
65:79:e4:66:44:fb:18:c7:d1:d2:a0:01:b9:f6:59:
c6:de:df:95:98:c1:7f:f4:3d:70:a7:3f:4c:81:83:
ac:aa:6c:65:88:df:a3:e4:a7:18:14:85:82:9a:8b:
4c:34:51:9a:8a:0e:06:59:56:c2:1b:34:1e:28:90:
92:7f:21:cf:96:4e:d4:f8:fe:d5:af:e9:48:c4:09:
24:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9E:2B:6B:E5:06:CD:D3:74:90:0D:CE:65:96:76:D2:BD:AD:7C:83
X509v3 Authority Key Identifier:
keyid:AD:0B:79:E4:B5:9C:5F:CD:A4:93:A2:0A:D1:8E:94:55:85:9D:03:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQt55LWcX82kk6IK0Y6UVYWdAxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/854ra-UGzdN0kA3OZZZ20r2tfIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.160.0/21
46.16.48.0/21
80.86.128.0/20
82.117.32.0/19
89.105.32.0/20
89.233.96.0/21
93.187.80.0/21
185.36.28.0/22
193.169.42.0/23
193.201.74.0/23
213.179.48.0/20
217.65.224.0/20
IPv6:
2001:a90::/32
2a01:b8c0::/32
2a03:6240::/32
Signature Algorithm: sha256WithRSAEncryption
a6:68:c2:e5:eb:3d:fe:05:94:3a:c3:a4:46:b5:83:96:ac:03:
e7:37:5d:b7:08:80:07:ed:63:1e:f7:97:d6:42:0e:18:fe:85:
2b:1b:6a:ee:5c:49:57:7b:90:86:44:55:9b:c7:3a:c3:51:fe:
e3:7f:cf:d3:56:3b:37:1e:b9:25:cb:f2:48:57:05:6d:35:68:
45:9f:24:7a:15:3c:33:6c:ff:53:9d:b1:2d:9c:97:cc:51:03:
57:8e:00:7b:ef:c7:09:24:e9:9f:77:c2:df:82:d6:da:83:d3:
59:93:0b:50:92:9f:09:97:04:57:66:ce:8f:4d:d7:6b:e2:aa:
e2:87:b7:ce:df:d5:51:46:66:09:08:39:31:8b:aa:37:96:68:
7a:36:9e:dc:81:28:09:92:38:e8:2b:88:ea:2d:9d:ea:22:5d:
22:7f:9d:61:15:6a:b5:1b:0a:3e:1b:22:63:7c:aa:cc:0f:7d:
36:d6:d2:8b:92:06:39:c7:10:44:8a:b9:dd:a5:be:26:e2:da:
25:9d:d6:9f:88:d4:6c:65:95:93:32:12:21:9a:b2:9c:9b:64:
81:25:05:5e:5b:a5:0a:28:92:c5:e4:e4:d3:e3:5f:0a:fe:8b:
2c:3f:f7:3c:b5:82:f4:bc:86:77:4c:02:0c:69:94:eb:8e:9a:
97:d0:b9:d7
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgISAY6tdRCii59l7KbbDtuArDxJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMGI3OWU0YjU5YzVmY2RhNDkzYTIwYWQxOGU5NDU1ODU5
ZDAzMWIwHhcNMjQwNDA1MDg1MTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzllMmI2YmU1MDZjZGQzNzQ5MDBkY2U2NTk2NzZkMmJkYWQ3YzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz84rjZRGDegALFyP8BwQnwDzW3db
Ul8TI8cNL1sDf4HNJr9nC4wzBRMxQz8irfIKQY6gcCumI13MqbS5jbzfq66Yqaan
a4It6LmVZ0m2Z1vDTSTAUrhszQG1yYlFRM4s8CeYWI/MOcOCwxPPmWWzLiHQegn8
TNp7mouugvxiNtz9YworxNlHJNAvoZQUwQueUq5bATJoQLFzyvltg6sSZh5LEuqW
9O6Rk3dRP5s846wpXjhleeRmRPsYx9HSoAG59lnG3t+VmMF/9D1wpz9MgYOsqmxl
iN+j5KcYFIWCmotMNFGaig4GWVbCGzQeKJCSfyHPlk7U+P7Vr+lIxAkkVwIDAQAB
o4ICaDCCAmQwHQYDVR0OBBYEFPOeK2vlBs3TdJANzmWWdtK9rXyDMB8GA1UdIwQY
MBaAFK0LeeS1nF/NpJOiCtGOlFWFnQMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclF0NTVMV2NYODJrazZJSzBZNlVWWVdkQXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9jZDU1NWItZjczZS00OGFkLWI1NDQt
ZTNlYjRlOGEzOGRiLzEvODU0cmEtVUd6ZE4wa0EzT1paWjIwcjJ0ZklNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9jZDU1NWItZjczZS00OGFkLWI1NDQtZTNlYjRlOGEzOGRi
LzEvclF0NTVMV2NYODJrazZJSzBZNlVWWVdkQXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH4GCCsGAQUFBwEHAQH/BG8wbTBOBAIAATBIAwQDBeKgAwQD
LhAwAwQEUFaAAwQFUnUgAwQEWWkgAwQDWelgAwQDXbtQAwQCuSQcAwQBwakqAwQB
wclKAwQE1bMwAwQE2UHgMBsEAgACMBUDBQAgAQqQAwUAKgG4wAMFACoDYkAwDQYJ
KoZIhvcNAQELBQADggEBAKZowuXrPf4FlDrDpEa1g5asA+c3XbcIgAftYx73l9ZC
Dhj+hSsbau5cSVd7kIZEVZvHOsNR/uN/z9NWOzceuSXL8khXBW01aEWfJHoVPDNs
/1OdsS2cl8xRA1eOAHvvxwkk6Z93wt+C1tqD01mTC1CSnwmXBFdmzo9N12viquKH
t87f1VFGZgkIOTGLqjeWaHo2ntyBKAmSOOgriOotneoiXSJ/nWEVarUbCj4bImN8
qswPfTbW0ouSBjnHEESKud2lvibi2iWd1p+I1GxllZMyEiGaspybZIElBV5bpQoo
ksXk5NPjXwr+iyw/9zy1gvS8hndMAgxplOuOmpfQudc=
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:01:07 2024 by rpki-client on console-fra.rpki-client.org